lucky99 Privacy Policy

1. Introduction

lucky99 ("we", "us", "our") operates the online gaming platform accessible at lucky99.asia. We are committed to protecting the privacy and personal data of all players and visitors who interact with our platform. This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of your personal information.

This Privacy Policy applies to all personal data processed by lucky99 in connection with your use of the lucky99 website, mobile site, and all associated services. It should be read together with our Terms & Conditions and Responsible Gaming Policy.

By registering an Account on lucky99 or by continuing to use the Platform, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree, please discontinue use of the Platform and contact us to close your Account.

2. Personal Data We Collect

lucky99 collects the following categories of personal data from players and platform visitors:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., Philippine National ID, passport, driver's licence).
• Contact Data: Email address, mobile phone number, and residential address (including city, province, and postal code within the Philippines).
• Account Data: Username, encrypted password, account preferences, communication settings, and responsible gaming tool configurations.
• Financial Data: Payment method details (e.g., GCash account reference, PayMaya reference, BPI/BDO/Metrobank account details), deposit and withdrawal history, and transaction records. Note: lucky99 does not store full bank account numbers or card numbers on its servers.
• Gaming Data: Game history, wagering activity, session duration, bet amounts, win/loss records, and bonus usage.
• Technical Data: IP address, device type, browser type and version, operating system, screen resolution, and referring URL.
• Usage Data: Pages visited, features used, time spent on the Platform, click-through data, and navigation patterns.
• Communications Data: Records of your correspondence with lucky99 customer support, including live chat transcripts and email exchanges.

3. How We Collect Your Data

lucky99 collects personal data through the following means:

• Direct Collection: Information you provide when registering an Account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, through cookies, web beacons, pixel tags, and server logs.
• Third-Party Sources: Identity verification data from KYC (Know Your Customer) service providers; fraud prevention data from anti-fraud partners; payment data from payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank.
• Regulatory Sources: Data received from PAGCOR or other regulatory authorities in connection with our compliance obligations.

4. How We Use Your Personal Data

lucky99 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your lucky99 Account, including processing deposits, withdrawals, and bonus credits.
• Identity Verification: To verify your identity and age (21+) in compliance with Philippine gaming regulations and anti-money laundering (AML) requirements.
• Service Delivery: To provide access to games, process bets and wagers, and deliver all features of the lucky99 Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gaming behaviour, enforce deposit limits and self-exclusion requests, and identify potential problem gambling indicators.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform.
• Legal Compliance: To comply with applicable Philippine laws, PAGCOR regulations, NPC requirements, and court orders.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the features, performance, and user experience of the lucky99 Platform.

5. Legal Basis for Processing

lucky99 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012 (RA 10173):

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you have accepted, including Account management and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including PAGCOR licensing requirements, AML obligations, and NPC directives.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

lucky99 does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your financial transactions.
• Identity Verification Providers: KYC and AML service providers engaged to verify your identity and comply with regulatory requirements.
• Technology Partners: Cloud hosting providers, game software providers, and platform infrastructure partners who process data on our behalf under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where required by law or regulation.
• Law Enforcement: Philippine law enforcement agencies, where required by a valid court order, subpoena, or other legal process.

All third parties with whom lucky99 shares personal data are required to handle such data in accordance with applicable data protection laws and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

7. Cookies & Tracking Technologies

lucky99 uses cookies and similar tracking technologies to enhance your experience on the Platform. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Performance Cookies: Used to collect anonymised data about how visitors use the Platform, helping us identify and fix performance issues.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming configurations.
• Analytics Cookies: Used to understand user behaviour and improve Platform features. Data collected is aggregated and anonymised where possible.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the lucky99 Platform.

8. Data Retention

lucky99 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements.

• Active Accounts: Personal data is retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with PAGCOR and AMLC record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years as required by Philippine anti-money laundering regulations.
• Marketing Data: Data used for marketing purposes is retained until you withdraw your consent or opt out of communications.
• Support Records: Customer support correspondence is retained for three (3) years following the resolution of the relevant matter.

When personal data is no longer required, lucky99 will securely delete or anonymise it in accordance with our internal data retention procedures.

9. Data Security

lucky99 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols.
• Encryption of sensitive data at rest using industry-standard encryption algorithms.
• Strict access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Staff training on data protection obligations and information security best practices.
• Incident response procedures to detect, report, and address personal data breaches promptly.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, lucky99 will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012 and its implementing rules.

10. Your Data Protection Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by lucky99:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data lucky99 holds about you, along with information about how it is being used.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact lucky99 via the in-platform live chat or by emailing [email protected]. We will respond to all verified requests within thirty (30) days in accordance with NPC guidelines. We may need to verify your identity before processing your request.

11. Children's Privacy

The lucky99 Platform is strictly intended for individuals aged 21 years and above. lucky99 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated Account.

If you are a parent or guardian and believe that your child has registered on the lucky99 Platform, please contact us immediately via live chat or at [email protected] so that we can investigate and take appropriate action.

12. International Data Transfers

lucky99 primarily processes and stores personal data within the Republic of the Philippines. In certain circumstances, personal data may be transferred to, or accessed by, service providers located outside the Philippines — for example, cloud infrastructure providers or game software licensors operating internationally.

Where such transfers occur, lucky99 ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements that require the recipient to apply data protection standards equivalent to those required under Philippine law. By using the lucky99 Platform, you consent to such transfers where they are necessary for the provision of our services.

13. Updates to This Privacy Policy

lucky99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered players via email or in-platform notification at least seven (7) days before the changes take effect, where reasonably practicable.

The most current version of this Privacy Policy will always be available on this page, with the effective date clearly indicated at the top. Your continued use of the lucky99 Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way lucky99 handles your personal data, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly within the lucky99 Platform — the fastest way to reach us.
• Email: [email protected]
• Languages: English and Filipino

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you are not satisfied with our response to your data protection concern.